Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1966d8b6-44f5-3772-8382-4a78597d323c.roa
File:                     1966d8b6-44f5-3772-8382-4a78597d323c.roa (raw, json)
Hash identifier:          fVQnbKAOBPD8+IcSfJFF6O91l91nIZtpWCLTC13lbks=
Subject key identifier:   70:AD:35:52:7B:1D:4A:5A:45:92:0F:7C:C6:5E:2B:F2:92:17:A7:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA79C7103164D175997D3B240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1966d8b6-44f5-3772-8382-4a78597d323c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     197450
IP address blocks:        166.0.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:71:03:16:4d:17:59:97:d3:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cc281158-7377-4c3f-a144-36f30b76c40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dd:03:d4:3e:59:57:fe:5f:9f:a4:36:da:0e:
                    56:0e:0b:55:cd:67:81:05:bd:e6:85:b4:ff:b1:6e:
                    1a:83:6f:15:d6:31:64:81:fc:bf:1f:11:ef:22:fb:
                    09:0b:69:8e:92:11:3f:66:2b:c6:5f:38:61:2a:38:
                    c4:b5:5c:7e:d0:61:8c:d1:44:94:b1:c1:db:59:43:
                    68:0f:77:09:9a:dd:4c:f1:9f:6e:d8:70:01:c0:99:
                    0d:53:8e:eb:4f:04:7c:d8:c4:36:91:47:49:70:2e:
                    56:5d:38:ad:fa:9d:76:c5:76:17:b6:49:b2:b7:34:
                    72:0e:2b:26:9a:f6:c2:58:f7:b2:17:2e:67:24:c1:
                    9b:48:55:18:ca:a7:86:f2:4e:56:8f:66:2a:ba:35:
                    f6:d2:73:37:fe:a3:13:ec:b1:99:1e:1f:62:4b:ff:
                    6a:fe:49:0e:b2:26:92:8e:75:93:bc:ef:bd:0e:27:
                    dd:4b:02:3b:bb:27:f9:56:fd:2f:d5:41:f0:7d:1d:
                    9f:7d:6c:f8:14:54:33:9d:48:ab:55:27:e3:7c:41:
                    8b:d5:90:00:d3:f1:66:87:7b:f0:07:07:95:b7:e5:
                    47:9c:26:94:f5:a9:cb:81:18:7d:5f:87:67:d2:d9:
                    ff:4b:96:a4:7b:85:0b:eb:d1:83:0b:2c:7e:ed:2b:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:35:52:7B:1D:4A:5A:45:92:0F:7C:C6:5E:2B:F2:92:17:A7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1966d8b6-44f5-3772-8382-4a78597d323c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5a:aa:b2:37:a6:1c:92:a7:3d:b8:69:22:19:a5:0c:6b:fc:
         9e:6d:27:13:03:09:d0:35:02:17:1e:9a:f4:35:15:02:2f:d5:
         77:23:f7:31:bf:bd:00:25:86:88:ca:05:cb:16:cb:8d:d4:64:
         03:2f:ff:70:9b:a3:34:21:d2:33:f2:76:2a:b0:51:ca:51:58:
         82:46:27:3c:e4:ac:d3:95:c4:96:69:8f:28:35:9f:59:94:74:
         89:12:f6:28:f1:b7:ec:49:1c:fe:ed:9a:1c:90:38:bd:e2:8b:
         4b:b0:ad:2a:a6:2a:42:a0:09:d4:84:b2:ad:f7:56:38:32:ff:
         89:51:b0:8f:12:1a:08:f8:5b:4e:2b:aa:c2:0b:d0:b4:c7:cc:
         3b:bc:dc:ba:24:65:3d:72:e7:34:c1:2c:5b:02:f9:11:54:34:
         ca:ae:17:5f:42:90:9e:00:8b:49:d8:2e:ed:ce:3e:88:da:b1:
         e6:28:ee:eb:10:79:9f:b5:86:59:97:a3:e1:42:34:20:f8:73:
         58:0d:9d:0f:e2:0f:1b:81:5f:63:59:e6:89:bd:de:bf:87:5c:
         27:9c:13:dd:73:fd:29:70:c0:d4:57:20:b1:11:07:6e:0f:12:
         d3:e4:7f:c0:7d:b4:09:ac:97:72:8b:ea:b6:e1:c1:5a:3c:59:
         ec:d3:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:12 2026 by rpki-client